Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/E0CE223E347911F08105690CC4F9AE02.roa
File: E0CE223E347911F08105690CC4F9AE02.roa (raw, json)
Hash identifier: 7827Ww6PbWPIoxtdGUYlZ4pJVXlagCKayUyN+/5jUs0=
Subject key identifier: 70:09:C1:7E:E9:62:FE:AC:C0:61:0F:BC:06:4F:E1:EC:22:1E:FF:64
Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial: 0FED
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/E0CE223E347911F08105690CC4F9AE02.roa
Signing time: Mon 19 May 2025 08:43:00 +0000
ROA not before: Mon 19 May 2025 08:43:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138981
IP address blocks: 103.138.24.0/22 maxlen: 22
103.138.26.0/23 maxlen: 23
103.138.26.0/24 maxlen: 24
103.138.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 14:10:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4077 (0xfed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Validity
Not Before: May 19 08:43:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682aef14-08fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:92:24:f5:aa:12:9c:ad:b2:04:e9:14:30:
7c:47:a9:17:a2:25:4e:f1:25:96:bf:40:03:2a:9d:
4c:fc:46:1e:cb:dd:6a:e6:99:de:21:2e:2e:46:e4:
04:90:5c:d5:64:d0:a9:6e:e1:26:f4:17:4d:99:e2:
d7:a0:19:f0:b2:58:5b:ce:d7:b3:75:4a:71:9d:bd:
43:23:6a:46:ec:22:53:58:6f:c6:70:3c:96:18:74:
ee:74:39:c0:01:4d:71:f8:da:28:9e:44:12:67:b6:
a3:67:89:34:6e:f5:4e:16:17:f7:a8:0e:a3:06:db:
98:b8:84:b4:d1:b4:2a:8d:f7:3e:c6:8a:e1:77:ae:
37:7a:b1:d0:72:48:0e:f9:2d:85:55:cf:fb:61:40:
a6:9d:49:49:3b:cb:20:dd:94:2f:06:6b:dd:a6:ab:
cb:cb:60:86:d5:20:fb:2b:53:53:af:0b:54:15:bb:
fd:c6:60:1d:a8:a2:cb:a2:23:0a:3e:0e:f3:0c:48:
fc:ea:7d:a6:cb:87:29:b7:f3:b1:9c:13:33:5d:79:
50:2b:05:9d:6f:0f:4c:0c:d1:5a:01:af:2b:32:3b:
3a:54:f6:1c:3b:64:3f:17:ee:1a:ec:04:70:3f:c3:
cb:5d:ce:f1:f5:2a:98:35:aa:71:d3:3a:78:36:e5:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:09:C1:7E:E9:62:FE:AC:C0:61:0F:BC:06:4F:E1:EC:22:1E:FF:64
X509v3 Authority Key Identifier:
keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/E0CE223E347911F08105690CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:49:12:b3:74:46:46:be:11:51:db:7c:0e:5c:34:cf:f7:21:
9f:05:2a:49:ba:60:5b:18:f7:80:3b:5d:37:ee:f3:51:91:91:
42:26:72:31:e9:d6:6e:21:02:f7:ca:b9:cb:ab:ae:e9:a1:68:
7a:1b:e2:79:bc:4a:b0:8b:b3:57:85:cc:0c:85:dd:fa:22:e9:
33:2c:60:7c:99:f4:ac:db:fd:e0:28:8e:39:2e:12:1e:a8:3c:
b6:65:60:5c:64:c4:e7:08:08:df:c2:6f:ec:ec:96:c1:db:22:
09:75:7a:05:f8:94:4f:9a:11:b3:44:e8:5f:ae:d6:99:98:66:
de:7d:c0:48:50:c7:f4:2b:b1:ab:64:1c:1f:59:f5:c3:3f:8a:
74:ce:ad:35:5d:4b:ad:c9:81:08:79:c0:98:95:6a:18:c9:ea:
4a:35:11:0a:23:0d:b7:0f:73:12:4b:57:c4:85:7d:17:d7:69:
3b:a6:44:96:45:aa:6e:b4:fe:16:ba:03:04:6f:d0:ce:71:8c:
94:0a:13:d2:26:0e:13:85:1c:20:9c:72:fe:5e:43:61:6a:52:
bf:c0:6e:96:34:f8:02:17:67:29:22:cc:f8:e5:ce:42:d9:f3:
e7:0a:96:95:a6:22:22:9d:31:10:83:ac:45:28:6c:47:d8:1a:
54:5d:30:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 03:20:40 2025 by rpki-client